CVE List

Id CVE No. Status Description Phase Votes Comments Actions
4474  CVE-2002-0080  Entry  rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.        View
5498  CVE-2002-1111  Entry  print_all_bug_page.php in Mantis 0.17.3 and earlier does not verify the limit_reporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted.        View
379  CVE-1999-0380  Entry  SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by setting a user"s Finger File to point to the target file, then running finger on the user.        View
1147  CVE-1999-1167  Entry  Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation.        View
1403  CVE-1999-1423  Entry  ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g. via ping -i.        View

Page 296 of 20943, showing 5 records out of 104715 total, starting on record 1476, ending on 1480

Actions